> you logged into your Paypal account and the payment is registered there No payment was made. They just sent an "invoice estimate" at my email, presumably ran

> you logged into your Paypal account and the payment is registered there No payment was made. They just sent an "invoice estimate" at my email, presumably randomly. No hacking was done, this is a phishing attempt, not a hacking attempt. This is why they so "wholesomely" offer that phone number to contact them if anything went wrong and I needed a "Refund". That's how they legitimize that phone number and increase their chances of a successful attack.